Privacy Policy

Last updated: 20 October 2026

Ari AI is a personal assistant you chat with on WhatsApp. It is run by HelloAri, a Delaware corporation in the United States ("HelloAri", "we", "us"). This policy explains what information Ari AI collects, what it does with it, who else is involved, and the choices you have. Ari AI is in early access for invited people.

What we collect

• Your account: the name, email address and Google account ID from your Google sign-in, the WhatsApp number you enter, your time zone, and when you signed up and linked WhatsApp.
• Your conversations: the messages, voice notes, pictures and files you send Ari AI on WhatsApp, and its replies. In a WhatsApp group you linked to your account, this includes messages from group members that mention Ari AI.
• What your assistant keeps for you: notes and memories it saves, files it creates in its workspace, reminders and scheduled tasks you set, and your goals and preferences.
• Its web browser: when Ari AI uses a web browser for you, that browser keeps its own cookies and the sign-ins you made in it, so you stay signed in to those sites.
• Google data, only if you connect Google accounts: see "How Ari AI uses Google data" below.
• Technical data: server logs (for example times, which feature ran and error messages) and usage counts (for example how many messages and model tokens your assistant used each day). We use these to run the service, keep it within its limits, fix problems and keep it secure.

The website uses one cookie to keep you signed in. There are no advertising or analytics cookies and no third-party trackers.

How we use it

• To answer your messages and do the tasks you ask for.
• To remember what you asked it to remember, and to run your reminders and scheduled tasks.
• To link your WhatsApp to your account and keep other people out of it.
• To keep the service working, secure and within fair-use limits.

We don't sell your information, we don't use it for advertising, and we don't use it to train AI models.

Who else processes it

• Amazon Web Services hosts our servers and stores your data (United States). Our server disks are encrypted.
• OpenAI provides the AI model. To answer you, the content needed for that answer (your message, the conversation so far, and anything Ari AI read for the task, such as a web page or an email you asked about) is sent to OpenAI. OpenAI also runs some of the web searches.
• Brave Search receives the text of some web searches (only the search words).
• WhatsApp (Meta) carries the messages between you and Ari AI. Ari AI is not affiliated with WhatsApp or Meta.
• Google provides sign-in and, if you connect Google accounts, access to their Gmail and Calendar.
• Websites that Ari AI visits for you see a visit from our server, and anything you ask it to type into them.

Voice notes are turned into text on our own server; they are not sent to another company for that. We may disclose information when the law requires it, or to protect people or the service from harm.

How Ari AI uses Google data

If you connect Google accounts on the dashboard (you can connect more than one, for example a personal and a work account), you give Ari AI permission to read, organise and send Gmail and to read and create Google Calendar events in each of them. Ari AI uses that access only to do what you ask in your chat or in a task you scheduled, for example: summarise new mail, find a message, draft a reply and send it after you confirm, list today's events, or add an event. With several accounts it reads from all of them, asks you which account to send an email from, and adds events to the account you mark as default unless you name another.

• When it's used: Ari AI reads your mail or calendar only when a request or a scheduled task of yours needs it. It does not scan your mailbox in the background.
• Sharing: the parts needed for your request are sent to our AI model provider (OpenAI) to produce the answer, and the answer goes back to you on WhatsApp. Nothing from your Google accounts is shared with anyone else, sold, used for advertising, or used to train AI models.
• People: no one at HelloAri reads your Google data, unless you ask us to for support, it is needed to investigate abuse or a security problem, or the law requires it.
• Storage: the access token for each Google account you connect is stored encrypted with a key held in a cloud key service. We don't copy your mailbox or calendar. Content Ari AI read for a request can stay in your conversation history and in notes your assistant saves, like the rest of your chat.
• Disconnecting: you can disconnect each connected Google account separately on the dashboard, at any time. We then revoke that account's token at Google and delete it. You can also remove access at myaccount.google.com/permissions.

Ari AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How long we keep it

• Your account, conversations and your assistant's notes and files: until you delete your account.
• Pictures and files you send: the copy in our shared media store is deleted after 3 days. A copy can stay in your assistant's workspace until you delete your account.
• Each Google account's token: until you disconnect that account or delete your account.
• A one-way fingerprint (not the address itself) of each Google account that was ever connected, and when it was first connected: kept after you disconnect it or delete your account, because Google limits how many Google accounts an app under review may serve and counts every account that ever connected.
• Link codes: they expire after 24 hours.

Your choices and rights

• Disconnect any of your Google accounts, change your WhatsApp number, or unlink WhatsApp on the website.
• Ask your assistant on WhatsApp to forget something or delete a file.
• Ask us for a copy of your data, to correct it, or to delete your account and everything stored for it, by emailing privacy@helloari.io from the email address you signed in with. We do this within 30 days.

Depending on where you live, you may also have the right to complain to your data protection authority.

Security

Each user's assistant runs separately, with its own workspace, memory, sandbox and browser. Connections to the website use HTTPS, server disks are encrypted, and Google tokens are encrypted. No system is perfectly secure; if a breach affects your data, we will tell you.

Children

Ari AI is for people aged 18 and over. We don't knowingly collect data from children.

Changes

If we change this policy, we update the date at the top. For important changes, we tell you on WhatsApp or by email before they take effect.

Contact

Questions or requests: privacy@helloari.io.